$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D3C8593E905E11EFAF2C185CC4F9AE02.roa File: D3C8593E905E11EFAF2C185CC4F9AE02.roa (raw, json) Hash identifier: mX5h1pe0z8G3BqKuVtzq+wiHKMx8BkOvpXEXAJFLe90= Subject key identifier: 7C:99:AF:2E:0C:AD:7C:DC:E2:27:DE:F2:CE:A3:59:7E:F0:D3:00:68 Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1C8C Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D3C8593E905E11EFAF2C185CC4F9AE02.roa Signing time: Tue 22 Oct 2024 10:17:23 +0000 ROA not before: Tue 22 Oct 2024 10:17:23 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 397373 IP address blocks: 115.42.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7308 (0x1c8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Oct 22 10:17:23 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67177bb2-7683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:e6:fe:4d:50:ec:89:30:e8:cf:88:73:8e: 8c:12:4f:2e:e9:7b:46:e0:46:1b:06:3e:8b:24:a4: cd:3d:77:4e:2d:2d:25:08:a0:cd:f7:b1:9e:c3:dd: ea:c6:58:a9:a2:d5:5a:11:7a:cb:a1:a8:57:6d:0a: a4:b9:86:b7:47:18:2d:61:46:0c:22:b9:ac:d7:99: 19:40:f4:d5:61:b9:82:6e:77:49:8b:a1:a3:13:9b: b2:51:93:51:50:1a:d1:8f:52:c9:de:52:0b:2e:40: 52:70:e7:fe:70:47:d3:91:65:e9:d4:8f:4d:27:7d: f0:5f:a6:90:03:bd:3a:be:ee:c5:d2:1a:76:a9:02: 35:3e:08:c6:ea:51:9b:bb:3e:93:d2:d0:0a:5a:fe: fc:82:4c:63:08:c0:72:48:11:b7:d2:c1:5a:78:bd: 75:f6:44:75:47:d8:c5:be:e7:4a:b3:76:d0:58:29: 69:28:ce:83:d9:e2:cc:4f:4f:a0:92:bc:21:7f:f2: 1a:ec:f4:46:a2:84:55:28:73:6c:89:b2:47:1f:a4: 7f:52:75:56:00:ff:99:47:18:b4:c4:3d:fa:23:31: 3b:d0:4a:76:2c:05:c6:77:5b:45:4a:38:19:cf:43: 19:01:38:22:68:c0:d6:f4:f5:21:5d:6c:50:f3:8d: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:99:AF:2E:0C:AD:7C:DC:E2:27:DE:F2:CE:A3:59:7E:F0:D3:00:68 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D3C8593E905E11EFAF2C185CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.42.71.0/24 Signature Algorithm: sha256WithRSAEncryption 47:51:5a:1f:e2:65:ab:b9:8f:e8:c2:dc:f5:92:59:50:90:0b: 30:7d:95:93:7c:6d:b0:d8:85:b2:41:13:62:bd:1a:62:ab:51: 34:d8:9b:c0:1e:2d:04:08:ec:e4:95:e5:9a:f8:d3:6f:25:70: 81:96:35:2c:59:3d:81:85:a1:56:e6:ff:34:ac:df:bb:d6:d3: 75:37:fb:0a:cf:25:99:1b:ff:44:04:3f:f9:d4:61:2e:22:d2: c3:4c:b5:f6:d1:6f:db:22:d6:f3:95:46:57:44:d6:0e:06:a7: b3:e4:15:8c:0c:23:db:2e:7c:0e:99:dd:ec:fa:11:f7:41:03: f8:b9:9d:0e:b4:80:32:e1:bc:8d:cf:4e:ab:7b:74:33:79:18: 75:74:a2:11:9b:1e:d2:0c:d2:95:2b:ac:18:99:18:d8:ea:83: c6:df:ea:e2:5d:80:d9:a1:e2:c9:06:2d:d9:a8:6c:9c:ee:1d: b0:1a:61:57:89:de:43:ba:42:27:5b:86:7b:ac:76:b3:35:d3: 8f:7e:8d:9a:a2:dd:f9:0d:b4:a2:24:85:3c:e0:59:c8:3a:3b: a6:7f:88:f1:12:b3:7a:d7:4e:3a:69:a7:25:61:a4:17:78:e4: 9d:7f:e1:79:94:69:9a:b2:cf:3d:b1:fd:6a:7a:cb:ee:f8:44: 4b:43:36:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjQxMDIyMTAxNzIzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE3N2JiMi03NjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwnm/k1Q7Ikw6M+Ic46MEk8u6XtG4EYbBj6LJKTNPXdOLS0lCKDN97Gew93q xlipotVaEXrLoahXbQqkuYa3RxgtYUYMIrms15kZQPTVYbmCbndJi6GjE5uyUZNR UBrRj1LJ3lILLkBScOf+cEfTkWXp1I9NJ33wX6aQA706vu7F0hp2qQI1PgjG6lGb uz6T0tAKWv78gkxjCMBySBG30sFaeL119kR1R9jFvudKs3bQWClpKM6D2eLMT0+g krwhf/Ia7PRGooRVKHNsibJHH6R/UnVWAP+ZRxi0xD36IzE70Ep2LAXGd1tFSjgZ z0MZATgiaMDW9PUhXWxQ84120QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHyZry4M rXzc4ife8s6jWX7w0wBoMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvRDNDODU5M0U5 MDVFMTFFRkFGMkMxODVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABzKkcwDQYJKoZIhvcNAQELBQADggEBAEdRWh/iZau5j+jC 3PWSWVCQCzB9lZN8bbDYhbJBE2K9GmKrUTTYm8AeLQQI7OSV5Zr4028lcIGWNSxZ PYGFoVbm/zSs37vW03U3+wrPJZkb/0QEP/nUYS4i0sNMtfbRb9si1vOVRldE1g4G p7PkFYwMI9sufA6Z3ez6EfdBA/i5nQ60gDLhvI3PTqt7dDN5GHV0ohGbHtIM0pUr rBiZGNjqg8bf6uJdgNmh4skGLdmobJzuHbAaYVeJ3kO6QidbhnusdrM1049+jZqi 3fkNtKIkhTzgWcg6O6Z/iPESs3rXTjpppyVhpBd45J1/4XmUaZqyzz2x/Wp6y+74 REtDNoA= -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:00 2024 by rpki-client on console-fra.rpki-client.org